logoalt Hacker News

immibisyesterday at 7:43 PM2 repliesview on HN

Digital signing wouldn't defend you from a compromised build server.


Replies

pabs3today at 2:11 AM

Reproducible Builds and multiple distributed builders would though.

https://reproducible-builds.org/

mbilkeryesterday at 8:09 PM

What in that act says OpenWrt would be made illegal? If anything, OpenWrt would roll out automated security updates for a supported branched release to comply with these regulations.

Also, if you actually read it, there are exceptions for open source software!

show 1 reply